CVE-2012-0809

2012-02-0100:55:02

CWE-134

[email protected]

web.nvd.nist.gov

cve-2012-0809

sudo

format string vulnerability

local code execution

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

26.8%

JSON

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

Affected configurations

NVD

Node

todd_millersudoMatch1.8.0

todd_millersudoMatch1.8.1

todd_millersudoMatch1.8.1p1

todd_millersudoMatch1.8.1p2

todd_millersudoMatch1.8.2

todd_millersudoMatch1.8.3

todd_millersudoMatch1.8.3p1

VendorProductVersionCPE
todd_millersudo1.8.0cpe:/a:todd_miller:sudo:1.8.0:::
todd_millersudo1.8.3p1cpe:/a:todd_miller:sudo:1.8.3p1:::
todd_millersudo1.8.1p2cpe:/a:todd_miller:sudo:1.8.1p2:::
todd_millersudo1.8.1cpe:/a:todd_miller:sudo:1.8.1:::
todd_millersudo1.8.1p1cpe:/a:todd_miller:sudo:1.8.1p1:::
todd_millersudo1.8.2cpe:/a:todd_miller:sudo:1.8.2:::
todd_millersudo1.8.3cpe:/a:todd_miller:sudo:1.8.3:::

Vendor	Product	Version	CPE
todd_miller	sudo	1.8.0	cpe:/a:todd_miller:sudo:1.8.0:::
todd_miller	sudo	1.8.3p1	cpe:/a:todd_miller:sudo:1.8.3p1:::
todd_miller	sudo	1.8.1p2	cpe:/a:todd_miller:sudo:1.8.1p2:::
todd_miller	sudo	1.8.1	cpe:/a:todd_miller:sudo:1.8.1:::
todd_miller	sudo	1.8.1p1	cpe:/a:todd_miller:sudo:1.8.1p1:::
todd_miller	sudo	1.8.2	cpe:/a:todd_miller:sudo:1.8.2:::
todd_miller	sudo	1.8.3	cpe:/a:todd_miller:sudo:1.8.3:::